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Processor: 


Motorola 68000 L-8 or 68010 L-~8 (L-10 for 10 Mhz) 


Memory Management: 


CPU Clock: 


Address Bus: 


Motorola 68451-L8 (L-10 for 10 Mhz) 
8 MHz or 10 MHz . 


24 bit physical and logical address bus. 
Conforms to IEEE 696/S-100 extended addressing. 


Address Space Allocations: 


Data Bus: 


Interrupts: 


Control: 


Bus Cycle Time: 


P.C. Boards 


Power: 


User-Selectable 
Options: 


Segmented memory management. 

32 dynamically sized segments, 256b to 16Mb. 
System level programs may run unmapped. 
Relocatable I/O-MMU Page. 


16 bit bidirectional data transfers, 8 bit 
data transfers. Programs must reside in 
16 bit memory. 


TEEE 696 Interrupt lines NMI and VIO through 
VI5 supported. 

Motorola device supplied interrupts fully 
supported by means of S-100 INT* line and 
daisy chain. 

ERROR*® line fully supported. 


Configured as permanent’ bus master. Provides 
TMA protocol as per IEEE 696. 


IEEE 696 S-100 (8 MHZ CPU) Bus Cycle: 
Unmapped: 750 ns 
Mapped: 1000 nS 

IEEE 696 S-100 (10 MHZ CPU) Bus Cycle: 
Unmavped: 600 nS 
Mapped: 800 nS 


High quality epoxy, solder masked both sides, 
sereened component legend, plated through holes, 
gold plated edge connector fingers. Sockets 
provided for all I.C..8. 


Consumes 1650 mA nominal from 8 volt line. 
7.5V Min, 10.5V Max. 


AO low on even or odd byte access, 
Start address switch selectable of 64K boundries. 


1.1--Data Bus: 


‘All modes of data transfer of the 68000 are supported 
by the CPU/68000/M. The only restrictions on the type of 
memories which may be used in the system are the following: 


1) Programs must be executed out of memory with a 
sixteen bit data path. 


2) Memories with only an eight bit data path may be used 
with the CPU/68000/M, however, only instructions 
which use a byte as their data type may be used to 
effect transfers to the memory. 


3) Memories which do not support extended addressing 
may be used with the CPU/68000/M, but will limit the 
total useable memory to 64Kb. 


1.2--Address Bus: 


The MC68000 supports a 24 bit address bus, providing 
to the user a 16 Mb address space. The MC68451 
memory management unit (MMU ) is physically located 
between the 16 most significant address lines of the 68000. 
and the corresponding 16 lines of the S-100 address bus 
(see block diagram, next page). 


\ 

The address lines on the 68000 are referred to as Logical 
Addresses. These are the untranslated addresses which 
the programmer sees when programming the 68000. Physi- 
cal Addresses are the addresses on the 5-100 bus. These 
are the addresses which memory, 1/0 boards and the I/0-MMU 
page address decoding responds to. 


The MMU can manage up to 32 segments in the address space. 
Since the MMU translates oniv the most significant 16 
address lines, the smallest allowable Segment size is 256 
bytes. The size of the Segments must be a binary order of 
magnitude, 256 bytes, 512, 1024,..., 16Mb. The segments 
also must be defined such that their physical and logical 
base addresses are a multiple of their size. 


The MMU can write protect segments, protect user or system 
processes from colliding, and translate logical addresses to 
physical addresses with an offset. For a complete descrip- 
tion of the MMU capabilities, see the Motorola documentation 
in section 5. 


The option is provided on the CPU/68000/M to allow bypassing 
the MMU on accesses to specified regions of the logical 
address space. See section 1.3 for a complete description 
of this feature. 
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4.3-- ALL, TOP, BOT, NONE and PROT Jumper: 


As was mentioned in the last section, it is possible to 
bypass the MMU. The array of jumpers ALL, TOP, BOT and 
NONE control which addresses pass through the MMU, and 
which proceed directly to the physical (S-100) address 
bus. Make certain that only one of these jumpers is 
eonnected at one time. 


If the ALL jumper is. set, all logical addresses pass 
through the MMU. If the NONE jumper is selected, all log- 
jeal addresses pass directly to the physical address 
bus. 


The CPU/68000/M can also partition the logical address space 
into two equal sections, one mapped and the other unmapped. 
If the TOP jumper is selected, all logical addresses from 
800000 to FFFFFF will pass through the MMU. When the 
addresses from the logical bus pass through the MMU, they 
participate in what Motorola refers to as the "matching 
and translation process" which makes up memory management. 
This is described in great detail in section 5. Any access 
to the bottom of the logical address space, 0 to T7FFFFF, 
will be passed directly onto the physical address bus. 


The BOT jumper works the same way, only the bottom half of 
memory from 0 to T7FFFFF is mapped, while the top of the 
address space from 800000 to FFFFFF is unmapped. 


The reasons for using the TOP or BOT settings are twofold: 


First, it is possible to increase the amount of avail- 
able segments. If all or a portion of the kernel pro- 
grams can run in protected unmapped space, more seg- 
ments are free for-user processes, 


second, a bus cycle in an unmapped portion of the 
address space will run faster than a bus cycle ina 
mapped portion of the address space. Configuring the 
board so system tasks run in the faster unmapped space 
can result in a performance gain. 
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The significance of each of the settings is summarized 
below: 


ALL: The entire physical address space is mapped. All logi-~ 
eal addresses pass through the 68451. 


NONE:The entire physical address space is unmapped. All 
logical addresses on the 68000 address bus pass 
directly to the physical (S-100) address bus. The 
memory management is inactive, although the MMU regis-~ 
ters may still be accessed. 


TOP: The TOP portion of the logical address space from 
800000 to FFFFFF passes’ through the MMU. The logical 
address space from 0 to 7FFFFF passes directly the phy- 
sical address bus. Protection of the unmapped space is 
available via the PROT jumper. 


BOT: The BOTtom portion of the logical address space from 0 
to 7FFFFF passes through the MMU. The logical address 
space from 800000 to FFFFFF pass directly onto the phy- 
sical address bus. Protection of the unmapped space is 
available via the PROT jumper. 


PROT Protection for unmapped space is implemented by means 
of the jumper labeled PROT. If this jumper is 
installed, the CPU/68000/M will not be allowed to 
access the unmapped address space unless the S bit 
(supervisor mode) is set in the status register. An 
attempted access to unmapped space by the CPU while in 
User mode will result in a bus error exception. 


The PROT feature was designed to be used in conjunction 
with the TOP or BOT jumper settings to protect system 
software running in unmapped address space. 
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Fig. 2 Mapped and Unmapped Regions 
of Logical Address Space 
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1.4-- I/O-MMU Register Page 


The 68000 instruction set does not have an explicit 
Input/Output instruction. Motorola architects intended for 
all 68000 I/0 to be memory mapped. Memory mapped I/0 takes 
advantage of the many powerful addressing modes for fast, 
efficient I/0 routines. 


To support S-100 I/O mapped peripherals and to allow commun-~- 
ication between the 68000 and the 68451, the processor board 
dedicates a 64 kilobyte page of the address space for I/0 
and the MMU registers. This page can based in the physical 
memory space at one of two following addresses: 


I/O-MMU pages 
1) 7FOOOO to 7FFFFF (LO) 
2) FFOOOO to FFFFFF (HI) 


The jumper which selects the location of the physical base 
address for the I/O-MMU page has two settings: HI and LO. 
See fig. 3 for the location of the I/O-MMU page jumper. The 
~HI. and .LO. refer to the position of the I/0O-MMU page at 
either a HI (FFO000) or LO (7FO000) base address. The 
CPU/68000/M comes configured with the I/O-MMU page jumper 
set to the .LO. position. Any access by the CPU/68000/M to 
the I/O page will cause the appropriate I/O status signals 
to be asserted on the S-100 bus. 


The MMU registers reside. in top 64 bytes of the I/0-MMU 
page, from TFFFCO to TFFFFF, or FFFFCO to FFFFFF in physi- 
cal memory, depending on where the I/O-MMU page is located. 
On any access to the MMU registers, all S-~100 strobes are 
rescinded until the data transfer between the CPU and the 
MMU is complete. Transfers between the 68000 and the MMU 
occur at 8 MHz. For a list of MMU register locations and a 
description of MMU register functions, see section 5. 


Some Examples: . 

If the I/0 page jumper is set to the HI position, 
the I/O page base address is FFOOOO. Hex address FFO0Q2 
corresponds to I/O port address 2, So the 68000 instruc- 


tion: 


MOVE.B OFFOOO2H, DO 


is functionally equivalent to the 8080 instruction 
IN 02H 
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If the I/0 page jumper were set to the LO position, the 
base address of the I/O page would be 7F0000. The 68000 
instruction to accomplish a read from port address 2 would 
then be: 


MOVE.B O7FOOO2H, DO 


Note that almost 64 K ‘bytes are dedicated to I/0 devices. 
This allows almost 64 thousand input and output ports. 
To support this many ports requires that I/0 devices decode 
the least significant 16 address lines. The IEEE 
specification allows the extended I/0 addressing, but does 
not require it. 


The majority of current I/O boards decode only the least 
Significant 8 address bits. This results in only 256 
input and output ports. Since the I/0 board does not 
decode the full 16 bit address the 256 port 
addresses are replicated through the 64  K byte 1/0 
space at 256 byte intervals. 
Eight bit (non-extended) I/O addressing example: 
When the I/0 page is in the LO setting, the instruc- 
tion: 

MOVE.B 7FO002 , DO 
will read from port 2 from a typical non~extended 
addressing I/0 board. 
The following will also read from port 2: 


MOVE.B 7F0102 , DO 


And so will this: 
MOVE.B TFO202 , DO 


And so on through the I/O space. 

See section 5.1 for a sample MMU register access. 

some Suggestions: 

When programming I/0, it is a good idea to use the bottom 


most 256 byte I/O block exclusively so as to avoid accessing 
the MMU registers accidently. Stay clear of the top 256 
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block, 7FFFOO to 7FFFFF (LO) or FFFFOO to FFFFFF (HI) to 
avoid unintentionally accessing the MMU registers. 


Since the I/0 page location is decoded in the phySsical 
address space, it may be assigned a segment and relocated or 
write protected just as with normal physical memory. Take 
eare that the operating system always has access to the MMU 
registers, as it is possible to map them out of the reach of 
the operating system entirely. 


If the decision has been made to map only half of the physi- 
cal memory, we recommend that the the TOP setting be used. 
The lower 8Mb could be reserved for the unmapped System 
tasks, as the exception vectors at hex addresses 0 to 400 
and the I/0/MMU page at 7FFFBF could all reside in the same 
half of memory. This would obviate the need to define a 
separate System segment for the I/O-MMU page and exception 
vectors, as would be neccessarv if everything were located 
in mapped space. 


2.1 RESET*, SLAVE CLR*, POC*: 


When power is first applied, RESET*, SLAVE CLR*, and POC* 
(Power On Clear) are all asserted low for 100 ms. - During 
this time, the CPU clears its registers and resets itself, 
and the MMU initializes its registers so that it comes up 
with segment 0 mapping the logical addresses to the physical 
address space with no offset. The size of the segment is 
16Mb, the entire address space. Even if the MMU is not 
engaged it is still initialized. For more information on 
the initial state of the MMU and its registers, see SOFTWARE 
THEORY OF OPERATION section 5. 


The 68000 .reset. instruction will cause the §$-100 SLAVE 
CLR* line to be asserted for 62 clock cycles (15.5 us). 
This is useful for initializing bus slaves to a known state. 
The -reset. instruction will not reset the 68000 or the 
MMU. 


2.2-~-dJump Vector Switch: 


A normal 68000 system reset operation consists of a 4 byte 
fetch from vector number 0 (hex address 0) to initialize 
the stack pointer, and a 4 byte fetch from vector number 1 
(hex address 4) to initialize the program counter. 


On a hard reset (power up, or RESET* asserted) the 
CPpU/68000/M will fetch the stack pointer and the program 
counter starting from the location indicated on the dip- 
switch shown in fig. 4. The jump location must be at a 64K 
boundary, since only the high order address byte is used to 
form the jump address. 


For Example: 


If your boot program resides at hex address 20008, and the 
Stack Pointer is 7FFF. Locations 20000 through 20007 would 
have to have the values shown below, and S1 would have to be 
set as shown on the following page. 


a STACK POINTER---~- +----PROGRAM COUNTER---~+ 
+ + + 
HERRAERKAKERRARKRKREARRKEKREKKERRKAAKKRRRKERRKRREKHREE 
* * # ® # ® x % ® 
*00 * 00 *7F * FF * 00 * 02 #00 # 08 * 
* ® * ® * * * x ¥ 
RHRRARREKAREKRRERRKERERREREREKERKRARERRERRRARERRAREHEERE 


Hex + + + + + + + + 
Address: 20000 20001 20002 20003 20004 20005 20006 20007 


On reset, the CPU will fetch the stack pointer and the 
program counter. It will then begin executing code at the 
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address of the PC, at 20008. 


2.3--Bus Errors and the ERROR*® Line: 


TR NESTON RE, ENN NEN RRA 


Bus errors derive from three sources: 
1) The MMU 


2) Attempted access of PROTected unmapped System 
space while in User mode. 


3) The S-100 ERROR*® line 


There are a number of conditions which will cause the 
MMU to initiate a bus error exception. Two of the most com- 
mon are: 


1) An attempted write to a write-protected segment, 
2) An Undefined Segment Access 


Refer to section 5 for more details on MMU generated bus 
errors. 


The ERROR® line on the S-100 bus is a generally defined 
signal used to indicate catastrophic errors. We define its 
use in the following fashion: 


1) The ERROR® line is sampled by the CPU/68000/M at 
two points in the S-100 bus cycle: 


a) the falling edge of phi during pSYNC. 


b) the rising edge of phi immediately preceding 
the data strobe (pDBIN or pWR*). 


2) After the ERROR® signal is latehed , the current 
bus: cyele is aborted, and 68000 bus’ error 
exception processing is held pending. Bus Error. 
exception pro-. cessing will proceed only after. 
the ERROR*® signal has been rescinded. If 
another bus error occurs during the exception pro- 
cessing, the 68000 will register a double bus 
fault eondition and the processor will be 
halted, 


Refer to the timing diagrams in the appendix for more 
detail. 


A CN ENIN  GEnNReATN Reheat 


The CPU/68000/M functions as a permanent bus master as 
specified in the IEEE proposed S-100 standard. Temporary 


ERROR*® 
As soon as the ERROR* line 
a is asserted low, the current 
bus cycle is aborted. All bus 
a strobes return to their non- 
asserted levels. 
pSYNC i 


mn Po 


Bus error exception processing will not proceed 

until the ERROR* has been brought high. If another 
bus error occurs during the bus error exception 
processing, the processor will register a double-bus- 
fault and halt. 


ERROR* Line Timing 


Figure 4a 
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bus masters (DMA devices) request the bus by asserting con- 
trol input HOLD*, They receive control of the bus when the 
bus master (CPU/68000/M) asserts control output acknowledge 
pHLDA. 


Upon receipt of HOLD the 68000 completes the current bus 
eyele and. then asserts pHLDA. The 68000 suspends all pro- 
eessing until HOLD* is released. A temporary master may now 
disable the four disable lines ADSB*, SDSB*, CDSB* and 
DODSB*, The temporary master now has complete control of 
the bus for as long as it wishes. When the bus is no longer 
needed control is returned to the permanent master by 
releasing the bus disable signals, and finally, HOLD*. 


The method of transferring the bus from the permanent bus 
master to a temporary master is explicitly specified in the 
TEEE bus standard section 2.8. Of significance is the 
method used to transfer ownership of the control output bus. 
To ensure glitch free transfer, both the permanent and tem- 
porary master drive the control output bus during the 
transfer period. Except for pHLDA, all lines are driven at 
their non-asserted levels. After a specified time (125 
nano-seconds) the temporary master asserts CDSB*®, disabling 
the permanent master.s control output bus drivers and 
acquiring control of the bus. 


Up to 16 temporary masters mav coexist in a system. A dis- 
tributed arbitration scheme determines the highest priority 
device which then takes control of the bus upon assertion of 
pHLDA. 


In general, the CPU/68000/M will relinquish control of the 
bus after the current bus cycle. However, if HOLD*® is 
received just before the start of a bus eycle, the 68000 
will go ahead with the bus cycle, relinquishing control 
after its completion. 


As TMA operations occur on the physical side of the address 
bus, care must be taken to insure that memory 
addresses passed to TMA devices are physical addresses, not 
logical addresses. The corresponding physical address for a 
given logical address may be determined by a MMU Direct 
Translation Operation. 


TAS Instruction: 


The 68000 TAS (Test And Set) results in different CPU timing 
than other instructions. Motorola defines it as a read- 
modify-write cycle. The instruction results in sequential 
read and write cycles on the S-100 bus. The two cycles are 
indivisble, that is, the write cycle must follow the read 
eycle. Two distinct $S-100 cycles are completed, but 
interrupts and bus requests will not be accepted until after 
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the instruction has completed, 


2.5--RUN, HALT, HOLD and FAST Indicators: 


The four L.E.D.s on the CPU/68000/M board indicate the fol- 


lowing conditions: 


RUN-~(green): 


HALT~-(red): 


HOLD-~ (yellow): 


Valid addresses on the logical addresses 
bus, i.e. the AS* pin of the CPU is 
active. This light is active when the 
CPU is the current bus master, and 
instruction execution is proceeding 
without error. 


CPU 18 halted. This oceurs either on 
reset (see section 2.1), or if a double 
bus fault condition is present. 


A temporary master has been granted con- 
trol of the bus. For example, this light 
will come on when a disk controller exe- 
cutes a TMA cycle. 
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3.1--68000 Priority Levels vs. S-100 Priority Levels: 


The first item to be aware of about interrupts is the rela- 
tion of the S-100 priority levels to the 68000 levels. 
According to the S-100 bus standard, NMI is the _ highest 
priority interrupt followed by VIO, VI1...VI7. Of these 9 
Levels of priority, the 68000 supports 7. The two lowest 
levels, VI6 and VI7, are not supported by the 68000. 
Motorola defines 7 as the highest level and 1 as the lowest 
level. This ean be a= source of confusion. Below is a 
chart which relates the twos 


TEEE/S- 100 68000 

NMI 7 .--highest priority 
VIO 6 

VI1 5 

VI2 y 

VI3 3 

VI4 2 

VI5 1 ...lowest priority 
VI6 --not supported-- 

VIT --not supported-- 


Asserting one of these lines low generates a 68000 "“auto- 
vector", and the 68000 will fetch a program counter (4 
bytes) as described in section 2.2. 


3.2-~Device-Suplied Vector Numbers vs. AutoVectors: 


The MC68000 chip provides a sophisticated interrupt 
structure which is completely supported by the CPU/68000/M. 
By supplying vector numbers to the CPU, 192 interrupting 
devices may be supported per priority level. 


The two groups of interrupts to which the the CPU can 
respond are- "device~supplied" and "auto-vector". Interrupt 
requests are placed on the S-100 lines NMI and VIO,...,VI5. 
Motorola 68000 device-supplied interrupt vectors are sup- 
ported through the use of the S-100 INT* line and the S-100 
interrupt lines NMI, VIO,...,VI5. 


See the next page for a chart illustrating the device sup- 
plied interrupt protocol. The CPU/68000/M may be enabled to 
fetch vector numbers off the data bus by installing the 
jumper labeled .XVC.. 


The CPU will only fetch a vector number from the data bus if 
INT*® is asserted, If one of the lines NMI, VIO, ..., VI5 
is asserted without INT*, a 68000 autovector operation will 


result. 
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S-100 Interrupt Priority PC Fetch Location (hex) 
NMI Te 
VIO 78 
VI 74 
VI2 70 
VI3 6C 
VI4 68 
VI5 64 
Notes: 


INT* never asserted. 

CPU will fetch 4 bytes of PC--address of 
interrupt service routine. 

MMU Interrupt and VIO at same priority level, 
IVR is the MMU Interrupt Vector Register. 


Table 5-2. Exception Vector Assignment 


Vector | . 

concn | Maemo 
| sp | Reset Initial SSP 
[SP [Reser teat Pc? | 
| SO feusttor 

| coc [| Sp fAdaesstror | 
|_SD_ | 
| So | 
| so | 
| 80 
| so | 


> 
zé 
* 


| oro | SD __ [Megal irstruction 
| 014 | Zero Divide 
CHK Insiruction 


TRAPY Instruction 
Privitege Violator: 


7 28 oc 


|| 
a ae | oa | so_| 
P| | oac [so | 
pat | 930] SO__[tUnassigned, Reserved) 
| _S0_| 
| SO | 
| so | 


(Unassigned, Reserved) 


(Unassigned, Reserved) 


ind 
.~ 


[ SD |Levet 2 Interrupt Autovector | 
Level 3 interrupt Autovector | 
Level 4 Interrupt Autowector | 
Level 5 Interrupt Autovectar_. 
Levei 6 Interrupt Autovectar . 
Level 7 interrupt Autovector ” 
TRAP Instruction Vectois4 _ 


ny 
~ 


iw 
@ 


o 


2 
124 


o 
s 
A 


| so 
|_sD_| 
| so | 
|_so__| 


$b 


32-47 


Q 


| 

| so | (Unassigned, Reserved) 

a Ss 

User Interrupt Vectors 
|___I= 

NOTES: 


1. Vector numbers 12, 13, 14. 16 through 23, and 48 through 63 are re- 
served for future enhancements by Motorola. No user penphecai devices 
should be assigned these numbers. 

2. Reset vector (0) requires four words, unlike the other vectors which only re- 
quire two words, and 1s located in the supervisor program space 

3. The spurious interrupt vector is taken when there is a bus error indica- 
tron during interrupt processing Refer to Paragraph 5.5.2 

4, TRAP fn uses vector number 3241. 


& 
B 


070 
074 
078 
BE 
FE 


0 


Din 
°° 
QO 


wo 


Table 1. 68000 Vector Number Table 


+5 


Fig. 5 Example Circuit to 
Supply Vector Numbers to CPU. 
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3.3--Protocol for Device Supplied Interrupts: 


Interrupting device 68000 CPU 


Cee Toll Naoel olen: Rum Kekona Kin hinthem inde tineKinalnmtionl OR ANE COON CTO I HI GH, 


Asserts one of NMI, VIO,...,VI5 
coneurrent with disabling all devices 
lower in the chain. 


+ 
> 
en ee + 
+ 
+ 
Compares interrupt level in status register. 
Waits for current instruction to complete. 
Asserts sINTA. 
68000 interrupt level is placed on 
address lines A1,A2,A3. 
of 
abe 
F oniemtaateskatebedaalantateateateateeteatenenonten + 
+ 


+ 
Compares A1,A2,A3 with the interrupt 
level which it asserted. If equal, 
deposit vector number on next read, 
and assert INT* 


+ 
+ 
» reeauetedtedueietontetateabetatenatedetented + 
of 
+ 
If INT*® asserted: 
Starts read cycle. 
Latches vector number on pDBIN,. 
Fetch PC at vector number * 4, 
Begins exception service routine 
at new program counter. 
If INT*® not asserted, then 
autovector 
+ 
- 
iis senloatelentelenliatenteenetasnaneetenetaetin + 
+ 


Interrupting device rescinds IRQ* 
active low). Enables devices 
lower in chain to generate interrupts. 
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3.4--Daisy-Chaining Interrupting Devices: 


In order to use two or more devices to supply vector 
numbers within a priority level (NMI, VIO,..., VI5), it 
is necessary to daisvy-chain devices which supply vector 
numbers within each priority level. 


"Daisy-chaining" means the following: 


If two or more devices in the = chain make simultaneous 
interrupt requests, the requesting device highest in the 
chain disables the lower ones, and supplies the vector 
number. 


A maximum of two interrupting devices may be used within the 
same 68000 priority level without daisy- chaining. 
The constraint is that one must supply a vector number 
to the CPU/68000/M while the other must use an autovec- 


tor. 


Devices are chained only within priority levels because 
the CPU displays the priority level it is servicing 
on address lines A1 through A3. Devices must only supply 
vector numbers to the CPU if lines Al through A3 on 
the address lines are equal to the 68000 priority level of 
the chained devices (see section 3.1 for an explanation of 
-priority level.). See fig. 5 for a sample circuit using 
daisy~-chained interrupts. 


Remember that it is only necessary to daisy~chain interrupt- 
ing devices if it is desired that two or more devices sup- 
ply vector numbers within a priority level to the 
CPU/68000/M. If autovectors only are requested on VIO (a 
normal S-100 interrupt), the ENOUT jumper is not required. 
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4.1--MMU Registers: 


MMU Register Page 
Physical Base address = 7FFFCO (LO) or FFFFCO (HI) 


(depending on setting of I/O-MMU page jumper ) 


Offset Acronym Function 


(bytes) 


Address Space Table: 


0 AST 0 reserved 
2 AST 1 user data 
4 AST 2 user program 
6 AST 3 reserved 
8 AST 4 reserved 
A AST 5 supervisor data 
C AST 6 supervisor program 
E° AST 7 interrupt acknowledge 
Accumulator: 
20 ACO Logical Base Addr/ translation ADDR (MSB) 
21 AC1 Logical Base Addr/ translation ADDR (LSB) 
22 AC2 Logical Address Mask (MSB) 
23 AC3 Logical Address Mask (LSB) 
24 ACY Physical Base Addr/ translated ADDR (MSB) 
25 AC5 Physical Base Addr/ translated ADDR (LSB) 
26 AC6 Address Space Number 
27 ACT Status Number 
28 AC8 Address Space Mask 
Control and Status: 
29 DP Descriptor Pointer 
2B - IVR Not implemented 
K2C GSR Global Status Register 
eF LSR Local Status Register 
31 SSR Segment Status Register /transfer descriptor 
39 IDP Not implemented 
3B RDP Result Descriptor Pointer 
3D DTO Direct Translation Operation 
3F LDO Load Descriptor Operation 


AWARNING! due to a characteristic of the current mask of the 
68451 MMU, writing to this read only register will HALT 
the processor board. 
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Calculating an MMU register address; 


an examples 
To write the contents of DO to AST7 with I/0-MMU page 


in LO (7F0000) physical memory: 


First calculate register address; 
AST7 address = (mmu base addr) + (ASTT offset) 


7FFFCE = 7FFFCO + E 


Then write the byte in DO (for example) to that address; 
MOVE.B DO, (7FFFCE) 
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¥,2—j-Motorola Documentation of 68451: 


The following is an edited version of the Motorola documen- 
tation for the MC 68451 Memory Management Unit. Note that 
as there is only one MMU in the system, so it is not neces- 
sary to distinguish between the terms global and local in 
the documentation, i.e. local operations are always glo- 
bal. In addition, the facility of the MMU to generate dev~- 
ice supplied interrupts to the CPU is not supported. 


- CO = 


4,3--Binary Buddy System 


The following paper outlines a memory management scheme sug- 
gested by Motorola for use with the 68451 Memory Management 


Unit. 
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BUMMARY 


Implemantation of meaory managemant 
in a computer aystem takes a combination 
of hardware and software. Bince the 
software issues involved are both coa- 
plex and system dependent the dacisions 
regarding them ara not easy and require 
compromises based on system priorities. 
IT am going to discuss some of the tra- 


deoffs involving hardware, software, 
time and memory. 
For an introduction to mamory 


management JI will use some background 
information en two current mamory 
management techniques, segmented memory 
management and paged memory management. 
Then I am going to talk about dascriptor 
management and its relationship te 
mamory management and I will alao dis- 
cuss memory fragmentation: both internal 
and external. Since aystem overhead is 
am key issve I will present some ideas oan 
how to reduce overhead with various 
memory management techniques. 


KI do not intend to do an exhaustive 
atudy of memory management philosophies 
but rather to point out some of the pit- 
falls you might encounter (hopefully 
before you aenceunter them) and to 
present an approach to memory management 
that is well-suited to the Motorola 
66451 Memory Management Unit (MMU). 


MORY MANAGEMENT 


TX 7O721 


Seamented versus Paged Memory Manecement 

Wham memory is divided into blocks 
of more than one size, these blocks are 
ganarally referred to as segments. Seg- 
ment aires wary depending on the 
anvironment. These sizes may be powers 
af two or they may change in size in 
steps that are powers of two or they may 
fall on any byte boundary. 


assigned ene or 
more wsagments. In a sagmented memory 
system, # task usually has fewer seg- 
ments than it would have in a paged sys- 
tem. This maans that less memory is 
required for the allocation tables that 
must be maintained in memory. The size 
ef a tegmant assigned to a task is usu- 
ally datermined dynamically at the time 
of the request. Fewer segments are 
needed to represent the resident task 


Each task can be 


and a8 @ result less overhead is naaded 


to manage the memory. 


In a paged system memory pager are 
fixed in length and wsuvelly small in 
seize with multiple pages assigned to 
@ach active task in the system. There is 
generally a table in memory te keep 
track of pages available for allocation 
and another table for pages currently 
Mllocated to active tasks. The page size 
in system dependent. 


The most frequently used page 
management scheme is demand paging. This 
techniqua refers to an approach in which 
pages are allocated to a task as needed. 
As @ reavlt the number of pages of 
memory that are allocated to a task at 


Ooh be PME NES 


any given time is small. And. since only 
a few peges. are allocated, the page 
allocation table which is generally 


resident in memory can be smaller. How- 
aver, this may result in more frequant 
system intervention to satisfy requests 
for additional memory. As a result sys- 
tem ovarhead increases. 


Bath of these approaches reprasant 
of dynamic storage allocation. 

storage allocation simply 

thet memory is allocated at run 
time and is dependent on the cwrreant 
state of the system. With either 
approach a task may resida in diffarent 


forms 
Dynamic 
implies 


areas of memory @ach time it is #exe- 
cuted. 

MOR R 
Internal Memory Freqmentation 


Internal memory fragmentation £4) 
occurs becaus# memory segments, although 
wariable in size, are only available in 
discratea izes. The unused portion of a 
requested segment of memory represents 
an instance ef internal fragmentation. 


Lets look at a memory request that 
rasults in internal memary fragmenta~ 
tion. We'll aseume that the smallest 
black of memory that can be allocated is 
aK. If a task requests a 7K block of 
memory we must fill that request with 
the next larger size segment, an GK seg- 
ment. As a rasult we have an unused 1K 
fragment that is not available for use 
by the system. This is referred to as 
internal fragmentation since the frag- 
ment is internal to a memory segment. 
Figure 1 illustrates this situation. 


Internal memory fragmentation can 
aiso be thought of as allocated memory 
that is not needad by the task it is 
allocated to. 

xtaern mor 

External memory fragmentation [43 
leads to the situation in which a task 
cannot gat a segment af memory of the 
Tequasted size even though there is 
enough memory available in the syaten. 


This happens because the memory managea- 
ment mechanism cannot combine the avail- 
able memory into a contiguous block at 
least as large as the segment requested. 
axternal 


For an example of manmory 


“sl 


FFFFFF CT 
f 9 
a 4 
a e 
a i) 
a a 
1K 
FRAGMENT 
aK 
SEQMENT 7K 
REQUEST 
9 a 
a a 
i] a 
a 7 
t a 
000000 Ld 
Figure 1. Example eof Internal Memory 
Fragmentation. 


fragmentation let‘’s look at memory after 
a number of requests have been mada and 
some segments deallocated. We'll assume 
we have a free 146K block at address 4000 
and another free 16K block at address 
18000, Now # request comes in for a 32h 
block of memory. A standard memory 
management algorithm such as the binary 
buddy algorithm looks for ai centiguous 
32K block composed of two 16K buddies. 
Bince these two 16K blocks are net con- 
tiguous the binary buddy method would 
ignore them. T# a contiguous 32K block 
could not ba found the request would be 
queved up until a contiguovs 32K hbloack 
was available. According to Knuth £1) 
this if not as inefficient as it first 


appears. In fact it doesn’t bacome a 
problem until 93% of memory has heen 
reserved, Figure 2 illustrates an a#:am- 


ple of axternal memory fragmentation. 


External mamory fragmentation can 
be thought of as unallocated memory that 
ies currently wnusable. This distin- 
gvishes it from internal fragmentation 
which also represents unusable memory 
but memory that has been allocated, 


FFFFFF CT 
8 q 
a 8 
CY) iJ 
a + a 
@ 
010000 
EXTERNAL 
FRAGMENT 
018000 
4 6 
4 e 
4 4 
008000 
EXTERNAL 
FRAGMENT 
004000 
900000 
Figure 2. Example of External Memory 
Fragmentation. 
THE 68451 APPROACH 
Rescriptor Manecement 
Any memory management mechaniam 


capable of 
of memory 


hardware is 
numbar 


involving 
represanting a fixed 


blocks at any one time. In the Metorola 
68431 thease memory blocks are 
represented by dascriptors. Each 
descriptor contains information that 


specifies the first word address of a 
memory block, its size or length. the 
physical addrass it will be mapped to, 
the task it is assigned to (its addrass 
space number), an address space mask 
that determines which tasks can shere 
thie memory biock and a segment status 
byte that contains access control and 
status information. 


The goal of descriptor management 
is ta minimize the number of times that 
MMU-rasident  deacriptore must be 
replaced. This happens if descriptors 
requirad by another task, being 
activated, are not rasident. When we 


leok at what it takes to do a task 
awitch we find ovt why we don’t want to 
replace MMU-resident descriptors. if 
the descriptors are resident we can sim- 


ply change tuo entries in the 68451’ 
address space table to select the naw 
user address space number. This is 


iliuatrated in figure 4 by the 
‘TASKSWTICH’ routine. However, if the 
descriptors are not rasident, the 
eparating system must first determing 


which resident descriptors to replace. 
Than i1¢ must load each new descriptor 
into the MMU as shown by the “LDDESC’ 


reutina in figure 6 And finally it must 
ehange the two address space table 
entries once the descriptors are 
residant. In some cases the descriptors 
must he saved before heing replaced. 
This is necessary if they contain status 
information that is significant ta the 
operating system (see ‘SAVEDESC’ and 
‘SVDSCRIB’ in figure 6). So we can see 
that descriptor management by itself is 
an important task. It must be handled 
properly to minimize system overhead. 


We must deal with two separate 
tasks in managing MMU descriptors. The 
first task invelves deciding on the 
number of descriptors to use to describe 
a given segment of memory. On one hand 
we would like enough descriptors to 
minimize the eccurrence of internal 
fragmentation, On the other hand we 
would like to use descriptors sparingly 
to reduce the need to replace resident 
dascriptors whan a new task is 
activated. If too many descriptors are 
used we may need more MMUs or we may 
increase system overhead required to 
transfer deacriptors in and out of the 
MMU from memory. 


At one axtreme we can always allo- 
cate memory using only one MMU dascrip- 
tor. The average memory block size 
requested will fall half way batwaen a 
given size Qesk and the next smaller 
size 2tek-1. Internal fragmentation with 
thin approach will be approximately 25% 
of the segment size required to fill the 
request. This is shown in figure 3. The 
amount af internal fragmentation for a 
particular block ize. Traprasented by 
one descriptor, will vary between 0% and 
$0%. The average amount of internal 
fragmantation will then be 25%. If the 
fragmentation reaches SOX we would use 
the next amaller segment.size and reduces 
fragmentation to zero. If we use @ 
descriptors per segment wae can cut the 
average waste in half from 25% to 12. 5% 
As we continue this approach the amount 


of internal fragmentation approaches 
zero. But the number of MIM descriptors 
left to describe other memory segments 
alan daecraasas. 
FFFFFF | 
a a 
a ] 
J a 
i] a 
a a 
- 25% 
UNUSED 
eK 
SEGMENT AVERAGE 
REGUEST 
S1ZE 
6K 
000000 
Figure 3. Relationship Between Descrip— 


tora and Internal Memory Frag- 
mentation. 


Keeping #11 descriptors in the MMU 
ali the time is one approach. This 
method works fine if the total number of 
descriptors is emall. Thare is a tra- 
deoff between the number of descriptors 
needed by the system and the number of 
MMUs necessary to hold those descrip- 
tors. 


The other approach is to keep 
descriptora in memory when there are not 
anough descriptors aveilable in the 
cee oe This necessitates swapping 
descriptors in and out-of the MMU(s) an 
@ dynamic basis. Since daacriptor swap- 
ping overhead is not negligible. we need 
to minimize the number of swaps required 
as a function of time. This creates the 
need for Deacriptor Management. 


Now we have a batter understanding 
of some of the tradeoffs that must he 
considered. They involve the three 


jasueas of 1) how many MMUs to put in the 
system, 2) haw much memory to put in the 
system, and 3) how much system overhead 
to allow for swapping dascriptors 
hetween the MMU(s) and memory. Thera is 
No easy answer to these three issues. 
Each eaystem has different characteris~ 
tice and must be tuned for optimum per- 
formance. One way to get a grip on 
these numbers would be to use simula- 
tions based on the makeup of a given 
system. Or we could build a prototype 
and axperiment with these system vari- 
ables while collecting data on system 
performance. Keep in mind. theugh, that 
performance can change with time as the 
type of programs run on the system 
change. Something that is optimal now 
might not be a faw months from now. 


Nemory Menecement 


Our intent throughout this discua- 
sion has bean to look at ways to effac~ 
tively managa memory. In order to manage 
memory we must break it up into parts 
that are @any to handle. The Motorola 
46431 is dasigned te divide memory inta 
parts whose sizes are powers of two. 
Thera have been several papers written 
en managing mamory in this fashion 4. 
The most common algorithm for use with 
tegments of these sizes is referred to 
as the binary buddy system. 


Ihe Binery Buddy Gustem 


The binary buddy system refers to a 
segmentation scheme in which all seg- 
ments are of sizes that are powers of @. 
Ae @ fTesult any segment can be split 
inte two “buddias’ whose sizes are alse 
powers of two. For instance an BK memory 
sagment at addrass xuccx can be split 
into two 4K buddies at addrasses xrxuxx 
cand arcst4K. Binary buddies are always 
aqual in size. The first werd address of 
the buddy for a segment is found by par~ 
forming the azclusive ‘OR’ of the seg- 


meant first word address and its size. 
Figure 4 shows how this is done. 
The desirability of this scheme 


lies in the ease with which buddies can 
be recombined into larger segments. We 
would like te recambine fraa memory seg7 
ments into the largest possible contigu- 
eve blecks in preperation for a large 
memory request. However this scheme is 
not without its problems. Overhead is 


* See references at and of paper. 


Sagment Address 18000 1¢c000 
Segment Gize- EOR 04000 EOR 04000 
Addreas of Buddy 1C000 18000 
Figure 4. Binary Buddy Address Calcula- 
tion. 
consumed in recombining huddies evan 
though the system may have to split 
these same buddies to satisfy the next 


request. If a smaller block of memory is 
needed next this might happen. In addi- 
tion it is possible to have two ad yacent 
memory segments of the same size that 
cannot be recombined because thay aran’t 
buddias. : 


FFFFFF C7 
8 ' 
8 Q 
a a 
ty 4 
q ¢ 
10000 
BUDDIES 
cooe 
NOT 
8000 ‘BUDDIES 
4000 
BUDDIES 
0000 
Figure 3. Example af External Memory 
Fragmantation. 
In figure 3 we have two 16k segments 


he combined because they 
aran’t buddies. Even though they are 
contiguous, the binary buddy system 
could not use them to #111 a request for 
3ekK of memory. But with the 68451 wie 
ceuld #11) the request by using two 
dascriptors. The 68451 wovld even permit 
ws to fill the request with two 14K sag- 


that can not 


ments that aren't contiguous. The 68451 
can overcome the problems caused by 
axternal memory fragmentation in this 
way. 

Memory Allocation 


In order to allocate all of the 
memory for a task efficiently we should 
be able to vary the size of the memory 
blocks we allocate. The 68451 is capable 
ef allocating blocks of memory in snizas 
fram 254 bytes up to 14777214 bytes 
These sizes are powers of two. 


Mask Power Size 
FFFFOO a2ee0B 100 
FFFEOO 2ende? 200 
FFFCOO 2a010 400 
FFFA0O Queers B00 
FFFOOO 2eni12 1000 
FFEGOO eel 2000 
FFCOOO anna 4000 
FFBO0O 2ne1s 8000 
FFOOOO eee 190000 
FEOQ000 aun? 20000 
FCOOO0 2eei8 40000 
FBN000 eens 80000 
FOO000 2en20 100000 
E0Q0000 ate tl 200000 
€00000 atane 400000 
800000 2teeg @00000 
000000 means 1000000 
Table 1. 66451 Memory Segment Sizes. 


Table 1 shows a1] possible block 
BQises for the 68451. These block sizes 
are selected hy loading the Logical 
Address Mask with the appropriate value 
as indicated in the table. Basically 
the Logical Address Mask determines how 
many bits of the logical address to pass 
through and how many to get from the 
Physical Base Address Register in the 
descriptor. Ones in the mask indicate 
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i & CODE EXAMPLES FOR INTERFACE TO THE MOTOROLA £8451 MEMORY MANAGEMENT UNIT 
2 : 

2 ® WRITTEN BY: RURSELL £. GCHRAUECH 

4 @ PATE: 23 DEC 1981 

8 

& 90000000 BORG $0 

? 

® @ PROGRAM EQUATES 

9 

10 BOFFODNDO om gu SFF OOOO fF BABE ADDRESS 

an on000D0R agt Eo 800 ADPRERE PACE TABLE OFFSET 

M2 [oe nelsrelal Je] aco Eu $20 ACCUMULATOR O OF FRET 

3 e0c0nn2& ale (<8) a26 ACCUMULATOR & OF FBET 

14 90000028 ace ou a28 ACCUMULATOR @ OF FRET 

as 00000031 To Eo an OFFSET FOR TRANSFER DESCRIPTOR OPERATION {READ) 
te 90000031 as au Oi OFFSET FOR SEGMENT STATUS WRITE OPERATION (HRITES 
1? ononooan oT cou 630 OFFBET FOR DIRECT TRANSLATION OPERATION (READ) 
19 a000002F cms) gov aor OFFSET FOR LOAD DESCAIPTOR OPERATION (READ?) 
1? 

Fs] 

ai 

a2 @ THE FOLLOWING ROUTINE ABSUMES THAT DESCRIPTOR INFORMATION EXIGTS IN 

a3 @ RYSTEM RAM AND THAT A DECI®ION HAG ALREADY BEEN MADE TO LOAD A SPECIFIED 
a4 #® DESCRIPTOR WITH GBELECTED INFORMATION. THE DESCRIPTOR NUMBER HAS ALREADY 
25 @ BEEM LOADED INTO THE DESCRIFTOR POINTER REQIBTER. THIR ROUTINE 18 DESIONED 
26 * TO MINIAIZE THE MUNBER OF ANM@TRUCTIOM CYCLES REQUIRED TO ACCOMPLISH THE 
a? @ LOADING OF THE DESCRIPTOR. : 

an . 

ae ® REQIGTER AO POINTER TO THE TABLE OF DESCRIPTORS FOR THE INTENDER TASK. 

30 ®@ REQISTER DO POINTS TO THE SELECTED DESCRIPTOR INFORMATION IN THE TABLE. 

RR 

32 @ EACH TABLE ENTRY HAR THE FOLLOWING FORMAT: 

~” 

4 * TARENT Tan (A1a-BIT LOGICAL BABE ADDRESS) 

33 e TABENT+2 pewet (26-BIT LOGICAL ADDRESS masK) 

vy r TARENT+4 pepe (16-BIT PHYSICAL BASE ADDRESS) 

37 ® TORENT +e WN (B-BIT ADDRESS SPACE NUMBER) 

28 « TARENT*? ae (Q-BRIT SEOMENT BTATUS) 

i] * ~ TARENT+® aA 4Q-BIT ADDRESS BPACE MASH) 

40 : 

41 . 

42 noconces inoesc EO * 404D DESCRIPTOR 

a3 , 

44 O10000 aCronnsp00ND HOVER. L. O(A0.D0),D4-DS MOVE LBA, LAM. PRA, ASN. & BB TO D4 & DS 

45 000006 16300008 MOVE. @(A40, RO). De MOVE £6 TO De 

4h 

4? 000004 48F P0030 

QOFFO0N20 MOVEM. 1. D4A-DS. MeReACO | =6— IVE LIRA, LAM. PBA, AGN, & GB TO MMU ACCUMLLATOR 0-7 

48 000012 12¢400F FO0Z8 MOVE. B Dé, MrUeACce MOVE AnM TO mr ACCUMULATOR @ 

oo 000018 102900FFOOaFr MOVE. B MILD. DO INITIATE DESCRIPTOR LOAD BY READING ADDRERS reeeD 
81 OOOO1E 475 are 

32 

83 

84 : 

$5 ® THE FOLLOWING ROVTINE SAVES THE CONTENTS OF @ DESCRIPTOR THAT 18 RESIDENT 
Se @ IN THE FeTU. §T DOES MOT AFFECT THE “UBSED’ DR ‘MODIFIED’ BITS. IT DOES MOT 
a? @ DISABLE THE DERCRIFTOR. THE PERCRIPTOR POINTER REGISTER, WHICH SELECTS THE 
sa @ PDERCAIPTOR TO BE READ. HAE BEEN LOADED PREVIDOUBLY, 

99 . 

a0 ®@ REGIBTER AO POINTR TO THE TAGLE OF DESCRIPTORS FOR THE INTENDED TASK. 

at @ REGISTER DO POINTS TO THE SELECTED DEGCARIPTOR INFORMATION IN THE TABLE 

42 

3 0000020 GAVEDERC cov ) SAVE DESCRIPTOR 

#3 900020 102900FF0031 NOVE.B FPRICTD. DO TRANSFER DESCRIPTOR TO MU ACCUMULATOR O-® 
os 
-@? 900024 4CFPN0I0 

OOF FOO20 WOVEN. L. PRRITACO. D4-DS) 9=—-MOVE CONTENT® OF ACCUMULATOR 0-7 TO DATA REOR 

“ QOO0N2E IACI0OFFOO2R MOVE, MMU ACE. DG MOVE CONTENTR OF ACCUMULATOR @ TO DATA REO 
‘ , 

70 000034 4@F 000300000 MOVER. i. D4-D5,0(40.D0) MOVE LBA, LAM, PRA, ARM & 88 FROM DATA REGR. TO Rar 
7 Q00034 11860006 MOVE. De. 100, DO) MOVE ASr FROM DATA REQIBTER TO MEMORY 

7] QOOO3E 4579 are 

vA 

78 

Th 


Figure & 664351 Utility Software Routines. 
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000068 4675 


a000006C 


THE FOLLOWING ROUTINE SAVES THE CONTENTS OF & DESCRIPTOR THAT 18 RESIDENT 
Im THE MU. TT DOES NOT AFFECT THE ‘USED’ OR ‘RODIFIED’ BITS. IT DOES 
DISABLE THE DEGCRIPTOR. THE DESCRIPTOR POINTER REGIGTER, WHICH BELECTR THE 
DESCRIPTOR TO BE READ, HAR BEEN LDADED PREVIDUBLY. 


REQIBTER 40 POINTS TO THE TARLE OF DESCRIPTORS FOR THE INTENDED TASH. 
RECIETER DO POINTS TO THE BELECTED DEGCRIPTOR INFORMATION IN THE TABLE. 


SVDEACDIA rau * GAVE DESCRIPTOR, THEM DIGABLE IT 


eas 


aasnasds 


o° 


POVE.B PPh TD. DO TRANSFER DESCRIPTOR TO PPR! ACCUPRAATOR 0-8 


WOVEN. L MMU+ACO.D4-DS = MOVE CONTENTE OF ACCUPEILATOR O-7 TO DATA RECS 
WOVE. BF PRIU+ACA. De MOVE CONTENTS OF ACCUMULATOR & TO RATA REO 


MOVERM. L D4-N3.0(A0, DO! MOVE 184. LAM. PRA. AST! & GS FROM DATA REOS. TO Ran 


OVE. BD. O(A0, DO) MOVE ABT FROM DATA REQISTER TO MEMORY 


MOVE. B 4&0. PRBS DISABLE DESCRIPTOR BY WRITING O TD SEO. STAT. BIT O 


ats 


THE FOLLOWING ROUTINE DOES A TASK SWITCH BY SIMPLY CHANGING THE ADDRESS 
SPACE NUMBERS FOR UBER DATA SPACE AND USER PROGRAM GPACE IN THE ADDREGS 
SPACE TABLE OF THE MMU(S). THIS MUST BE DOME WHILE THE PROCESSOR IG IN, 
RUPERVIGORY MODE. TO CHANGE THE SUPERVISOR ADDRESS SPACE NUMRER IT 1S 
NECESBARY TO SWITCH TO USER MODE. 


DO COMTAINS THE ADDREGE SPACE MUMBEAS FOR UBER DATA SPACE AND USER PROGRAM 

RPACE IN THE FOLLOWING FORMAT: . 
BO = XX BD XX PP 

WHERE XX@DON‘T CARE. PPeVWRER PROORAM SPACE ASN. DDEVBER DATA BPACE ASN 


@© CONTAINS THE ADDRESS OF THE AGT LOCATION TO BE CHANGED 
IN THIS CASE. MAIART+1, 


TASKSNTCH Ew al OHITCH TO & NEW UBER TARK 


ees2 4 


MOVE.b. BO. (AD) MOVE USER DATA ABN TO ASTI & UBER PROORAMN ARN TO ABT2 


ate 


THE FOLLOWING ROUTINE DOER A DIRECT TRANSLATION, THIS OPERATION 18 USED 
BY THE OPERATING BYBTEM TO DETERMINE THE ABSOLUTE ADDREES REPRESENTED BY 
@ LOGICAL ADDRESS. THIS 18 USEFWA. FOR RETRIEVING PAMANETERS FROM USER 
ADDRESS BFACE AND FOR HANDLING DATA TRANSFERS REQUESTED BY A SYSTEM CALL. 
THESE ARE OMY TWO OF PANY POSSIBLE USES FOR THIG fea! OPERATION. 


Im ESSENCE THE f) DOERR AN ADDRESS TRANGLATION. HOWEVER, RATHER THAN 
CONTINUING WITH A MEMORY ACCESS. THE Meu CATCHES THE PHYBICAL ADDRESS 
QEMERATED AMD RAVES IT IM ACCUMULATOR 4 & 8 OF THE fel THAT DID THE 
TRANELATION, THI® REPREBENTS BITE @ THROVOH 29 OF THE ADDRESS. BITE 0 
THROUGH 7 GENERALLY BYPASE THE MPI AND ARE NOT MAPPED. 


AO COMTAIMA THE 24-BIT LOQICAL ADDAERS TO RE TRANSLATED 
DO CONTAING THE ADDRESS SPACE MUPIRER IM WHICH TO DO THE TRANSLATION 


OM RETURN, Bi CONTAINS THE STATUR INDICATING IF THE TRANSLATION WAS BUCCERSFLA. 


DTRAN 8=6fau * PERFORM A DIRECT TRANSLATION 


GBOodsSC KICHOOFFOO2ZO 
OOON72 LICODOFE ODORS 


000078 1a7POOFFOOID 


ODOO7E 4E78 


OVE OD, PPRIACO MOVE A6-RIT LOGICAL ADDRES TO ACCUMAA.ATOR 0 & 1 
FOVE.D DO, PPRITACe MOVE B-HIT ADDRESS BPACE MBER TO ACCUMULATOR & 


MOVE. B PRT. DA READ MW) ADDRESE TO PERFORM DIRECT TRANSLATION 


are GTATUR RETURNED IN D1, PHYB. ADDR. IN ACCUM. 4 & 3 


Figure 6 68451 Utility Boftware Routines (Cont'd). 


bits thet come from the Physical Base 
Addrass Register. Zeros indicate bits of 
the logical address from the CPU that 


are passed through the MMU to the physi~- 


cal address bus. 48 more bits of the 
legical address are used both the 
addressing range and the segment size 
increase. 


flemory Liberation 


When a memory sagment is 
liberated it is recombined with its 
buddy if the buddy is also free. This is 
a recursive type of operation that cen- 
tinves until a free segment doesn’t have 
a free buddy. This process can be time- 
consuming and hecames another factor 
that affects overall system parformance. 


freed = oor 


In order to reduce system overhead 
needed to recombine buddies we could 
stop the recombinatian process when the 
segment has reached a2 aize that is 
optimum for our particular system. This 
size will ba ane that satisfies most of 
the memor? requasts received. However. 
the system will use additional time to 
fill requests that are larger than this 
optimum size. This in one of the system 
variables that will need to be fine- 
tunad for bast performance. 


CONCLUSION 


The Motorela 68451 effectively sup- 
ports memory management. The binary 
buddy system can be easily implemented 
using the 68451. Memory management is 
important for today’s wmicraprecessor— 
based systems with their large addrass 
spaces and Motorola has the hardware to 
support it. 
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MC68451 MEMORY MANAGEMENT UNIT 


F.1 INTRODUCTION 


The MG68451 Memory Management Unit (MMU) provides address translation and protec- 
tion for the 16 megabyte addressing range of the MC68000 processor. Each bus master 
(or processor) in the M68000 family provides a function code and an address during each 
bus cycle. The function code specifies an address space and the address specifies a 
location within that address space. The function codes distinguish between user and 
supervisor spaces and, within these, between data and program spaces. This separation 
of address spaces provides the basis for memory management and protection by the 
operating system. Provision is also made for other bus masters, such as the MC6&8450 
Direct Access Controller (DMAC), to have separate address spaces for efficient direct 
memory access. A multitasking operating system is simplified and reliability is enhanc- 
ad through the use of a memory management unit. 


The MC68451 is the basic element of a memory management mechanism in an MC68000- 
based system. The operating system is responsible for ensuring the proper execution of 
user tasks In the system environment, and memory management is basic to this respon- 
sibility. The memory management mechanism provides the operating system with the 
capability to allocate, control, and protect the system memory. A block diagram of a 
memory management mechanism using a single MMU is shown in Figure F-1. : 


A memory management mechanism implemented with one or more MC68451 MMUs can 
provide address translation, separation, and write protection for the system memory. The 
memory management mechanism can be programmed to cause an interrupt when a 
chosen section of memory Is accessed, and can directly translate a logical address into 
a physical address, making it available to the processor for use by the operating system. 
Using these features, the memory management mechanism can provide separation and 
security for user programs and allow the operating system to manage the memory in an 
efficient fashion for multitasking. 


F.2 MEMORY SEGMENTS 


The memory management mechanism partitions the logical address space into con- 
tiguous pleces called segments. Each segment is a section of the tagical address space 
of a task which is mapped via the memory management mechanism into the physical ad- 
dress space. Each task may have any number of segments. Segments may be defined as 
user or supervisor, data-only or program-only, or program and data. They may be access- 
ed by only one task or shared between two or more tasks. In addition, any segment can 
be write protected to ensure system integrity. if an undefined segment is accessed, a 
FAULT Is generated by the MMU and apptied to the bus error input of the processor. 
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Figure F-1. Memory Management Mechanism Block Diagram 


F.2 FUNCTION CODES AND ADDRESS SPACES 


Each bus master In the M68000 family provides a function code during each bus cycle to 
Indicate the address space to be used for that cycle. The address bus then specifies a 
location within this address space for the operation taking place during that bus cycle, 


The function codes appear on the FCO-FC2 lines of the MC68000 and divide the memory 
raferances into two logical address spaces — the supervisor and the user spaces. Each 
of these is further divided into program and data spaces. A separate address space is 
also provided for interrupt acknowledge bus cycles giving a total of fiva defined function 
codas. 


In addition to the 3-bit function code provided by the MC68000, the MMU also allows a 
fourth function code line (FC3) which provides for the possibility of another bus master in 
the system, in this case, FC3 would be tiled to bus grant acknowledge input of the 
MC68000 to enable a sacond set of elght function codes. This raises the total number of 
possible function codes to sixteen. If there is only one bus master (the MPU), the FC3 pin 
of the MMU should be tied low and only eight address spaces used. 


F.4 ADDRESS SPACE NUMBERS 


To separate the address spaces of different tasks, each address space Is given an identi- 
fying number. This should not be confused with the address space indicated by tha func- 
tlon code. Each function code defines a unique address space and within each of these 
thera can exist a number of differant tasks. Each of these tasks needs an address space 
number (ASN) to distinguish it from the other tasks with which it may share an address 
spaca. 


The address space numbers are kept in the MMU in a set of registers called the address 
space table (AST). The AST contains an 8-bit entry for each possible function code (16). 
Each entry can be assigned an address space number and, during a bus cycle, the func- 
__ tion coda Is used to Index Into this table to select the cycle address space number. This 
number is then associatively compared with the address space number in each descrip- 


tor to attempt to find a match. 


F.5 DESCRIPTORS 


Address translation is done using descriptors. A descriptor is a set of six ragisters (nine 
bytes) which describes a memory segment and how that segment is to be mapped to the 
physical addresses. Each descriptor contains base addresses for the logical and 
physical spaces of each segment. These base addresses are then masked with the 
logical address masks. The size of the segment Is then defined by “don't cares” in the 
low-order bits of the masks. This method allows segment sizes from a minimum of 256 
bytes to a maximum of 16 megabytes in binary increments (i.¢., powers of two). This also 
forces both logical and physical addresses of segment boundaries to lie on a segment 
siza boundary. That Is, a segment can only start on an address which is a multiple of ak. 
Tha segments can be defined so that they are physically shared between tasks. A func- 
tional block diagram of an MC68451 MMU is shown in Figure F-2. 
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Figure F-2. MC68451 Functional Block Diagram 


During normal translation, the MMU translates the logical address provided by the 
MC68000 to a physical address which Is than presented to the memory array. This is ac- 
complished by matching the logical address with the information in the descriptors and 
then mapping it Into the physical address space. ' 


The logical address Is composed of address fines A1-A23 as shown In the memory 
management mechanism block diagram, Figure F-1. The upper 16 bits of this address 
(A8-A23) are translated by the MMU and mapped into a physical address (PA8-PA23). The 
lower seven bits of the logical address (A1-A7) bypass the MMU and become the low- 
order physical address bits (PA1-PA7). 


F.6 MMU REGISTER DESCRIPTION 
A programmer's model of the MMU Is shown in Figure F-3, The MMU register consists of 


two groups: the descriptors and the system registers. Each of the 32 descriptors Is nine 
bytes long and defines one memory segment. 
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Local Status Register $2F 
Interrupt Descrptar Pointer $39 
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Figure F-3. MC68451 Programmers Model 


The system registers contain both information local to the MMU and information global 
to the memory management mechanism. Each bit In the system registers and the seg- 
ment status registers, except the address space table, is one of four types: 
~ Contral Control bits can be set or cleared by the processor to select 
MMU options. These are read/write bits. 

Status Alterable Status alterable bits are set or cleared by the MMU to indicate 
status Information. These are also read/write bits. 

Status Unalterable Status unalterable bits are set or clearad by the MMU to reflect 
status information. These bits cannot be written by the pro- 
cessor. 

Reserved Reserved bits are reserved for future expansion. They cannot be 
written and are zero when read. 

Tha system registers are all directly addressable from the physical address space. Ac- 
cessing these registers causes certain operations to be performed. The descriptors are 
not directly addressable, but are accessed using the descriptor pointer and the ac- 
cumulator. , 


in the following discussion, a segment access Is defined as a successful match occur- 
ring on a segment during normal translation. 


F.6.1 DESCRIPTORS. Each MMU contains 32 descriptors (0-31), each of which can define 
one memory segment. A descriptor is loaded by the processor using the accumulator and 
descriptor pointer with a load descriptor operation. Thea segment status register (SSR) 
can be written to Indirectly by the processor using the descriptor pointer. Each descriptor 
consists of the fallowing registers: 


Logical Base Address (LBA) Address Space Number (ASN) 
Logical Address Mask (LAM) Address Space Mask (ASM) 
Physical Base Address (PBA) Segment Status Register (SSR) 


F.6.1.1 Logical Base Address (LBA). The logical base address register Is a 16-bit register 
which, together with the logical address mask, defines the logical addressing range of a 
segment. This is typically the first address In the segment, although it can be any ad- 
drass within the range defined by the logical address mask. 


F.6.1.2 Logical Address Mask (LAM). The logical address mask is a 16-bit mask which 
defines the bit positlons in the logical base address register which are to be used for 
range matching. Ones, In the mask, mark significant bit positions while zeroes Indicate 
“don't care” positions. A range match occurs If, In each bit position in thea logical ad- 
dress mask which Is set to one, the logical base address register matches the incoming 
logical address. The matching function Is depicted schematically In Figure F-4. 


a) a ones 


Figure F-4. Schamatic Representation for Address Matching 


F.6.1.3 Physical Base Address (PBA). The physical base address register is a 16-bit 
register which, together with the logical address mask and the incoming logical address, 
is used to form the physical address. The logical address is passed through to the 
physical address in those bit positions of the logical address mask which contain zeroes 
(the “don’t cares”) and the physical base address is gated out in those positions which 
contain ones. A schematic representation of the physical address generation 
mechanism is shown in Figure F-5. 
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Figure F-5. Schematic Representation of Physical Address Generation 


F.6.1.4 Address Space Number (ASN). The address space number is an 8-bit number 
which, together with the address space mask, is used in detecting a match with the cycle 
addrass space number. 


F.6.1.5 Address Space Mask (ASM). The address space mask is an 8-bit mask which 
defines the significant bit positions in the address space number to be used in descriptor 
matching. As in the logical address mask, the bit positions which are set are used for 
matching and the bit positions that are clear are “don't cares.” A space match occurs If, 
in the significant bit positions, the cycla address space number matches the address 
space number. Address space matching Is schematically similar to logical address 
matching as shown in Figure F-4. 


F.6.1.6 Segment Status Register (SSR). Each descriptor has an 8-bit segment status 
register. The segment status register can be written to in two ways: using the load 
descriptor operation or indirectly using the descriptor pointer in a write status ragister 
operation. Each bit is labeled as control or status alterable. Bits 5 and 6 ara reserved for 
future use. 


WP 


7 6 5 4 39 2 1 +O Address 
fut [ [1 [ip [mM [we] € | indirect through Descriptor Pointer 


U (Used) is set by the MMU if the segment was accessed since it was defined. This 
bit is status alterable. 
Set: a) by a Segment access (successful! translation using tha segment) 
b) by an MPU write of "1" 
Cleared: a) Reset (in segment #0 of master) 
b) MPU write of “0” 


If the I (interrupt) control bit is set, an Interrupt is generated upon accessing the seg- 
ment. : 
Set: a) MPU writes “1” 
Gleared: a) MPU writes "0" 
b) Reset (segment #0 of master) 


IP (interrupt Pending) is set if the “I” bit is set when the segment is accessed. iRQout 
is asserted if an IP bit, in one or more SSAs, is set and IE in the global status register 
is set. IRQout is negated when all the IP bits in all SSRs are clear or IE is cleared. IP 
is status alterable and should be cleared by the Interrupt service routine. 
Set: a) Segment access and ‘1" is set 

b) MPU writes “1" 
Cleared: a) MPU writes a “0” 

b) Reset (in segment #0 of master) 

c) Ebitisa “0” 


The M (Modified) bit is set by the MMU If the segment has been written to since it 
was defined. The M bit is status alterable. 
Set: a) Successful write to the segment 
b) MPU writes a “1” 
Cleared: a) MPU writes a “0” 
b) Reset (segment #0 In master) 


If the WP (Write Protect) control bit is set, the segmant is write protected. A write ac- 
cess to the segment with WP sat will cause a write violation. 
Set: a) MPU writes a ‘4" 
Cleared: a) MPU writes a “0” 
b}) Reset (segment #0 In master) 


E (Enable) is a control bit which, when set, enables the segment to participate in the 
matching process. E can be cleared (the segment disabled) by a write ta the SSA, but 
a toad descriptor operation must be performed to set It. 
Sat: a) Load descriptor with AC7, bit 40 

b) Reset (segment #0 In master) 
Cleared: a} MPU writes a “0” 

b) Unsuccessful load descriptor operation on this descriptor 

c) load descriptor operation with AC7, bit #0 clear 


F.6.2.2. Accumulator (ACO-AC&). The accumulator (Figure F-3) is used to access the 
descriptors, perform direct translation, and latch information during a fault. The ac- 
cumulator consists of nine 8-bit registers. The register assignments for each operation In 
which it participates is shown in Table F-1. 


The contents of the accumulator can be either local or global depending on the 
preceding operations. The global accumulator for load and global accumulator for 
translate bits in the local status register (LSR) indicate whether the information in the ac- 
cumulator is sufficiently global to perform a load descriptor or direct translation opera- 


tion, 


Table F-1. Accumulator Assignments for Operation 


} Register Direct Translation Normal Translation (Fault) 
Assignment 
NO LG eh ra satot i : 


F,.6.2.3 Global Status Register (GSR). The global status register is an 8-bit register used 
to reflect faults and to enable interrupts from an MMU, All MMUs maintain identical infor- 
mation in their global status registers. Bits 1, 2, 3, 4, and 5 are reversed for future use. The 
organization of the global states register is shown below. 
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FF (Fault) is a status alterable bit that is set by the MMU whenever FAULTin is 
detected. Clearing the F bit automatically clears bits L4-L7 in the local status 
register. 

Set: a) Write violation detected in this MMU 
b) FAULTin detected (writa violation in another MMU) 
c) ALLin detected (Undefined Segment Access) 
d) MPU writes a 1" 
Cleared: a) Reset asserted 
b) MPU writes a “0” 


DF DF (Double Fault) ls set if a FAULTin signat was detected with F set. OF is a status 
aiterable bit. 
Set: a) FAULTin detected and F was previously set 
b) MPU writes a “1” 
Cleared: a) Reset 
b) MPU writes a "0" 


F.6.2 SYSTEM REGISTERS. The system registers consist of: 


Address Space Table (AST) Descriptor Pointer (DP) 
Accumulator (ACO-AC8) Result Descriptor Pointer (RDP) 
Global Status Register (GSR) interrupt Descriptor Pointer (JDP) 
Local Status Register (LSR) Interrupt Vector Register (IVR) 


F.6.2.1 Address Space Table (AST). Each MMU has a local copy of the address space 
table. This table is organized as sixteen 8-bit, read/write registers located starting at ad- 
dress $00. Each entry is programmed by the operating system with a unique address 
space number, each of which is associated with a task. During a memory access, the 
MMU receives a 4-bit function code (FCO-FC3) which is used to index into the address 
space table to select the cycle address space number. This number is then used to check 
for a match with the address space number In each of the 32 segment descriptors. 


Only the MC68000 microprocessor and the MC68450 direct memory access controller on- 
ly provide a 3-bit function code. In a system with more than one bus master, the bus grant 
acknowledge signal from the processor could be inverted and used as the fourth bit, FC3. 
This would result in the address space table organization shown in Figure F-6. 
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Figura F-6, Address Space Table Organization 


1E If 1 (interrupt Enabte) Is set, the Interrupt-raquest line is enabled. This is a read/write 
controt bit. 
Set: a) MPU writes a “1” 


Cleared: a) Reset 
b) MPU writes a ’0” 


F.6.2.4 Local Status Register (LSR). The local status register is an 8-bit register which 
reflects information local to its MMU. The local status register can be globally written but 
the global accumulator for load, global accumulator for transiate, and local interrupt 
pending bits will not be affected. Bits L4-L7 are cleared if the fault line in the global 
status register is cleared. All bits in the local status ragister are cleared on reset. The 
organization of the local status register is shown below. 


() Address 
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RAW AW is a status alterable bit which reflects the state of the RW pin at the time 
FAULTin is asserted. 
Set: a) MPU writes a “1” 
b) Read of segment when F in SSR is set 


Cleared: a) Aeset 
b) MPU writes a “0” 
c) Write of segment when F in SSA is set 


GAT GAT (Global Accumulator for Transtiate) Is sat by the MMU if ACO, AC1, and AC6 are 
globally consistent. 
Sat: a) if ACO, ACG1, and AC6 are globally consistent (thay were last 
modified as a result of a global writa) 


Cleared: a) Reset 
b) !f ACO, AC1, and AC6 are not globally consistent 


GAL GAL (Global Accumulator for Load) is set If ACO, AC1, AC2, AC3, AC6, and AC8 are 
globally cansistent. 
Set: a) If ACO, AC1, AC2, AC3, AC6, and AC8 are globally consistent 


Cleared: a) Reset 
b) #f ACO, AC1, AC2, AC3, AC6, and AC8 are not globally consistent 


LIP LIP (Local Interrupt Pending) is set If one or more descriptors have IP set in their seg- 
meant status registers. 
Set: a) If iP is set in any descriptor 


Cleared: a) Reset 
b) if all IP bits are clear 


L4- The status information encoded In L4-L7 reflects the status of the MMU after the last 
17 avent (an operation or fault). Thase bits are encoded and changed as a unit. Thay are 
cleared whenever the F bit In the GSR Is cleared and are alterable by the MPU. 


17 L6 L514 
0 09 0 © NO The MMU was not the source of the last event. 
0 0 O OT A direct translation was locally successful. A match was found in 
one of the MMUs descriptors. 

1 0 0 14 LO A load descriptor fault occurred. A previously defined descriptor 
conflicts with the descriptor being loaded. 

1 0 1+ O USA An undefined segment access was attempted. The logical address 
was not matched In any descriptor in the MMU. 

1 1 0 0 WV Avwrite violation occurrad. A segment defined in this MMU was write 
protected and a write to that memory segment was attempted. The 
NVR bit in the ROP will show whether tha USA or WV occurred in this 
MMU. 


Set: a) Various bits set if DT, LD, USA, or WV occur 
b) MPU writes a “1" 
Cleared: a) Reset 
b) MPU writes a “0” 
c) When F bit in GSR is cleared 
d) if MMU was not the source of the last event (NO) 


F.6.2.5 Descriptor Pointer (DP). The descriptor pointer is an 8-bit read/write pointer 
ragister located at address $29. The five low-order bits identify the descriptor to be used 
in tha load descriptor, read segment status (transfer descriptor), and write segment 
status operations. Bits 5, 6, and 7 are reserved. 


The descriptor pointer !s initialized to $00 on reset. It can be globally written by the pro- 
cessor. The descriptor pointer is loaded by the memory management mechanism with 
the number of the descriptor matched in a direct translation operation to allow a subse- 
quent transfer descriptor operation to load the matched descriptor into the accumulator. 


F.6.2.6 Rasult Descriptor Pointer (RDP). The result descriptor pointer Is an 8-bit, read-only 
register that identifies a descriptor involved in the following events: a write violation, a 
load descriptor failure, or a direct translation success. The result descriptor pointer Is 
loaded from a priority encoder which determines the highest priority descriptor involved, 
For example, tn a load descriptor operation, more than one descriptor currently in the 
MMU may collide with the descriptor being loaded. Only the number of the highest priori- 
ty descriptor will be loaded Into the rasult descriptor pointer. Descriptor 0 is considered 
to be the highest priority and 31 is the lowest. 


The bit assignments are shown below, Bits 5 and 6 are reserved. The result descriptor 
pointer Is initlalizad to $80 on reset. 
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NVA if no descriptor is selected by the priority encoder when the ROP is loaded, NVR 
(No Valid Result) is set, otherwise it is cleared. This bit is status unalterable, 
Set: a) Reset 
b) No result from WV, LD, or OT 
Cleared: a) A WV, LD failure of DT success in this MMU 


Ro- 
R4  RO-R4 encode the number of the descriptor selected by the priority encoder 


F.8.2.7 interrupt Descriptor Pointer (IDP). The interrupt descriptor pointer is an 8-bit read- 
only register that is read to determine which descriptor caused an interrupt. Each time it 
Is read, the Interrupt descriptor pointer is loaded from the priority encoder with the 
highest-priority descriptor which has the interrupt pending bit in its segment status 
ragistar set. If no descriptor has an interrupt pending bit set, the no valid interrupt bit is 
sat. 


The bit assignment Is shown below. Bits 5 and 6 are reserved. 
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NVI NVI is set if no descriptor has IP set, otharwise it is cleared. 


10-14 These bits encode the number of the descriptor selected by the priority encoder. 


F.6.2.8 Interrupt Vector Register (IVA). Tha interrupt vactor register is an 8-bit read/write 
register containing the interrupt vector. Its contents ara put on data lines DO-07 during 
the interrupt acknowledge operation to provide the processor with a vector number. The 
interrupt vector register Is initlallzed to SOF (the MC68000 uninitializad-device vector 
number) on reset. 


F.7 MMU OPERATIONS 


Table F-2 shows the operations which can be performed. Each operation is initiated by 
the access of an address given on the register selact fines AS1-AS5 and the upper and 
lower data strobes. The access can be from aither the logical or physical address bus. In 
a multiprocessor system, an external processor could access the memory management 
mechanism from the physical address bus. If the access is fram the togical address bus, 
an address translation Is first performed. If the access Is from the physical address bus, 
the operation state is entered directly from the idle state. 


Table F-2. Summary of MMU Functions 


Summary 
Tne MMU backs off the bus to prepare for a mew access 


Normal Transiation 
Wate System Regeiers 
: 


An operation to ‘ead the system registers 


Wate Segment Status The SSA of a descnptor can be quickly changed using ths operation. The enable bit cannot 
be set using 't, however 

Load Descriptor With this aperation, the contents of the accumulator are loaded into the descriptor pamted to by 
the descnptor painter 


Transter Desenptor This operation transfers the contents of the setected descriptor into the accuinulator 
Ouract Translation An operation to gtobally translate a logical address for the operating system 
An operation that supplies a vector number to ine MPU in response ta JACK 


interrupt Acknowledge 


The operation phase is always entered with PADQ-PAD15 in the high-impedance state 
and either (in the case of an operation following a normal translation) one MMU asserting 
HAD to hold the physical address, or (in the case of an access from the physical bus) the 
external processor holding the address. If both chip select and either the upper or lower 
data strobe is asserted or interrupt acknowledge and interrupt request in are asserted, 
the MMU asserts ED to enable the data transceivers. 


If interrupt acknowledge and interrupt request in are asserted, an interrupt acknowledge 
operation is performed. if chip select and either the upper or lower data strobe is 
asserted, the memory management mechanism datermines which operation to perform 
by decoding the register select lines and the read/write line. These signals tefl which 
register is associated with thea operation, which operation to perform, and whether the 
operation is local or global. 


After each operation, data transfer acknowledge Is asserted to indicate to the processor 
that the operation is finished. When the processor negates the data strobe, data transfer 
acknowledge and ED are rescinded and PADO-PAD15 are placed in the high-impedance 
state. If address strobe Is negated, or had been negated since tha last normal transla- 
tlon, the MMU enters the idle state. 


After the data transfer acknowladge handshake, If address strobe ramalins asserted and 
chip select and either the upper or lower data strobe Is asserted, another master opera- 
tion is performed. If address strobe remains asserted and GOin and alther the upper or 
lower data strobe is asserted, another slava operation ts performed. 


F.7,1 OPERATIONS ADDRESS MAP. Table F-3 shows the operations address map. Each 
system register has an address at which it can be read or written. in addition, some ad- 
dresses do not correspond to a register, but rather designate an operation to be perform- 
ed by reading that location. 


Tha data strobes are logically separate and operations using both are Independent. The 
operation ands when both data strobes are negated. 


Some addresses are reserved for future expansion. Any access to an unused location will 
result in a null operation. If the access Is a read, the appropriate byte of the data bus is 
driven high. If the access Is a write, no side-effect occurs. 


F.7.2 LOCAL OPERATIONS. Some operations, such as reading the status registers, af- 
fect only one MMU. These are called tocal operations. Local operations include: 


interrupt Acknowledge Transfer Descriptor 
Read System Register Write Segment Status Register 


F.7.2.1 Interrupt Acknowledge. The interrupt acknowledge operation is performad if in- 
terrupt acknowledge and interrupt request in are asserted at the beginning of the opera- 
tion phase. During interrupt acknowledge, the contents of the interrupt vector register 
are placed on data lines D0-D7 to provide the processor with a vector number. 


F.7.2.2 Read System Register. Each system register has an address at which it can be 
read, Each MMU should be chip selected at a differant location to access the registers in 
each. During a processor read of the interrupt descriptor pointer, it is first loaded from 
the priority encoder and then gated onto data lines DO-D7. 


F.7.2.3 Transter Descriptor. in order to read the contents of a descriptor, it must be 
transferred into the accumulator and read from there. The descriptor pointer is first writ- 
ten by the processor with the number of the descriptor desired. The transfer descriptor 
operation is then performed by reading from the segment status register address ($31). 


The contents of the selected descriptor {s then transferred Into the accumulator as 
shown In Table F-1 and the contents of the segment status register are gated onto data 
lines 00-07. The descriptor registers may then be read from the accumulator. 


F.7.2.4 Write Segment Status Register. The segment status register of any descriptor 


can be written using the descriptor pointer as a pointer. Any bit may be written except the 
enable bit. Enable may be cleared using this operation but it may not be set. 


F.7.3 GLOBAL OPERATIONS. A global! operation is one which Is performed in parallel on 
all MMUs in the system. Global operations include: , 
Writes to System Registers 
Load Descriptor Operation 
Direct Translation 


In global operation, one MMU must be the master and the rest must be slaves. The opera- 
tlon begins with chip select and either the upper or lower data strobe asserted on one 
MMU. The MMU with chip select asserted becomes the master for that operation. The 
master asserts GOout and, upon detecting GOin as trua, the other MMUs become slaves 


in the oparation. 


if there is onty one MMU present in the system, the ANY, ALL, and GO pins must be tied 
to VCC through pull-up resistors. Global operations then become local only. 


F.7.3.1 Write System Register. Each system register that can be written to is written 
globally. This includes: the accumulator, the address space table, the descriptor pointer, 
the Interrupt vector register, and the local and global status registers, The operation is 
performed by writing to the desired register’s address, . 


The MMU which has chip select asserted becomes the master by asserting GOout. The 
other MMUs detect GOin and become slaves. Each MMU transfers the data on the data 
bus to the selected register, If the write is to a byte of the accumulator, that register is 
marked as global. If the fault bit in the global status register is clear, local status register 
bits L4-L7 are also clear. 


When the transfer is completed In each MMU, each will assert ALLout. After all MMUs 
have asserted At_Lout, ALLin will be true and, upon detecting ALLin, the master rescinds 
GO. 


F.7,3.2 Load Descriptor Operation. Descriptors are loaded by transferring the contents of 
the accumulator to the descriptor after performing global checks for collisions. A colli- 
sion exists when two or more enabled descriptors are programmed to translate the same 
logical address. 


To prepare for descriptor loading, the accumulator must be loaded globally with the 
logical base address, logical address mask, address space number, and address space 
mask. To make global collision checks, accumulators AC6 and AC8 must have been 
globally loaded. If they are, the global accumulator for load bit in the local status register 
of each MMU is set. To initiate the operation, a read from the address $3F is done. If the 
load is successful, the data bus will be set to $00. If a collision is found, the load is unsuc- 
cessful and the data bus Is set to $FF. 


During the load descriptor operation, the MMU with chip select asserted becomes the 
master by asserting GOout. The other MMUs detect GOin and become slaves. The slave 
MMUs decode the operation from the register selact lines, the read/write line, and the 
data strobes. The descriptor whose number is in the descriptor pointer is disabled (its 
enable bit is cleared so that it cannot cause a collision). 


if the global accumulator for toad bit In the global status register of a slave Is clear, bits 
LA4-LA7 in tha local status register are encoded to indicate that a load descriptor fault 
has occurred and ANYout is asserted. If global accumulator for foad Is set, the slave 
checks the enabled descriptors against Its accumulator for collisions. If a conflict Is 
found, the slave asserts ANYout and loads its result descriptor pointer with the number 
of the descriptor which caused the collision. If no collision is detected, bits L4-L7 in the 
local status register are cleared. When GOin {ts detected, ALLout and ANYout are 
negated and the operation ends. 


The master aborts the transfer If there is a local descriptor confiict, the global ac- 
cumulator for load bit is clear, or if ANYin is asserted. If the failure was not local, bits 
L4-L7 In the local status register are cleared. Otherwise, bits .4-L7 ara ancoded for a load 


descriptor fault and ANYout is asserted by the master. The master then puts $FF on data 
lines to indicate _a failure to tha processor, negates ALLout and ANYout, and rescinds 
GOout. When ANYin Is negated, the operation is terminated. 


If there ware no local collisions, its global accumulator for load bit was set, and ALLin is 
asserted, the master completes the transfer and enables the loaded descriptor. It then 
puts $00 on 00-07 to indicate success, clears L4-L7, negates ALLout, and rescinds 
GOout. 


F.7.3.3 Direct Translations. The memory management mechanism can be used to direct- 
ly translate the logical address into a physical address and make it available to the pro- 
cessor in the accumulator. The logical address to be translated is globally loaded into ac- 
cumulator ACO-AC1 and the address space number to ba used is loaded into ac- 
cumulator AC6. Translation is initiated with a read from the address $3D. 


If the translation is successful, the descriptor pointer and result descriptor pointer point 
to the descriptor which performed the translation and the physical address is loaded Into 
accumulator AC4-ACS5. The processor reads $00 from the data bus. 


If the logical address could not be translated because it was globally undefined, the data 
bus Is sat to $FF to indicate the failure. 


Using accumulator AC6 to supply the cycle address space number, each MMU attempts 
to match the logical address contained in accumulator ACO-AC1 with one of its enabled 
descriptors, Each MMU must have the same information in accumulator ACO, AC1, and 
AC6. The global accumulator for translate bit In the local status register is set if these 
registers have each been globally loaded. 


If a match is found and global accumulator for translate bit is set, the physical address is 
formed as in normal translation and put into accumulator AC4-AC5, The result descriptor 
pointer and descriptor pointer are loaded from the priority encoder and bits L4-L7 in the 
local status register are encoded to indicate direct translation. The master puts $00 on 
data tines DO-07 to signal that the translation was successful and rescinds GO to ter- 
minate the operation. 


If no match Is found, or the glabal accumutator for translate bit Is clear, the MMU asserts 
ALLout and bits 14-L7 in the local status register are cleared. The master monitors the 
ANYin and ALLin inputs. 


if ANYin becomes asserted, then another MMU performed the translation. The_master 
puts $00 on data lines D0-D7 to indicate success, negates ALLout, and rescinds GOout. it 
waits until ANYIn is negated before terminating tha operation. 


If ALLIin becomes asserted, then none of the MMUs performed the translation. The 
master puts $FF on data lines 00-D7 to indicate failure, negates ALLout, and rescinds 
GOout to terminate the operation. Each slave MMU negates ANYout and ALLout when 
the master MMU rascinds GO at the end of the operation. 


F.6 MMU FUNCTIONAL DESCRIPTION 


The memory management mechanism Is comprised of one or more memory management 
units. Each MMU Is capable of describing thirty-two segments. If more than thirty-two 
segments are required in the system, more MMUs can be added to increase the number 
in 32-segment increments. 


In order to perform its operations, some of the information in the MMU’s registers must 
be global. That is, it must be duplicated in all the MMUs in the system. For example, the 
address space table must be global to ensure that the address space numbers are com- 
mon to all MMUs. To allow this, certain operations are defined as global. Any system 
register that can be written is written globally. This includes the accumulator, the ad- 
dress space table, the descriptor pointer, the interrupt vector register, the global! status 
register, and the local status register. The result descriptor pointer and the interrupt 
descriptor pointer are read-only and, therefore, are focal and not global. 


The ANY, ALL, and GO signal lines are used to connect muitinle MMUs to form the 
memory management mechanism. The memory management mechanism uses these In- 
put/output signals to communicate information between MMUs and maintain functional 
unity, The global! operation (GO) pin is used to establish the master-slave relationship 
between MMUs for a given operation. The ANY signal fs detected as true if any MMU 
asserts it, allowing MMUs to report conditions that are important in evan one device. The 
ALL signal is detected as true only if all MMUs assert it. It is used to verify that all MMUs 
in the system have performed some operation or are in the same state. A sample circult 
diagram of a two-MMU system is shown in Figure F-7. 


During each global operation, one MMU is specified as the master; all others are 
designated as slaves. The MMU which has its chip select asserted becomes the master 
by asserting the GOout signal. This signals the other MMUs that they are slaves for that 
operation, Note that all MMUs may be accessed and, therefore, any one may be the 
master for a given operation. | 


F.8.1 MMU FUNCTIONAL STATES. At any time, an MMU may be in one of five states: 
Reset 
Idle 
Norma! Transtation 
Local Operations 
Global Operations 


Ina global operation, an MMU may be a master (if the chip select signal is asserted) or a 
slave (if GOin is asserted). In addition, two actions can occur regardless of the current 
state: 
1. If RESET Is asserted, the Reset operation begins, The memory management 
mechanism will remain in the Reset state until RESET ls negated. 


2. TRQout is asserted If local Interrupt pending bit in the local status register and in- 
_ terrupt enable bit in the global status register are set, otherwise it is placed in the 
high-impedance state and should be negated with a pullup resistor, 


F.8.1.1 Reset State. Asserting RESET will initiate the reset sequence regardless of the 
state of the MMU. Ouring reset, GO, data transfer acknowledge, ED, MAS, HAD, and WIN 
signals are rescinded. The physical address port, FAULT, and ANY linas are placed In the 
high-impedance state. Pullup resistors on the FAULT and ANY lines keep these signals 
negated. The ALL. pin is driven low to negate it. 


The global status register, local status register, descriptor pointer, and the entire ad- 
dress space table are initialized to $00. The result descriptor pointer is initialized to $80 
and the interrupt vector register to $O0F. All descriptors ara disabled by clearing the 
enable bits In their segment status registers. 


In order to allow the address bus to function before the operating system can initialize 
the mamory management mechanism, one MMU Is selected to have descriptor #0 in- 
itialized so that it maps any logical address unchanged to the physical address bus. The 
MMU is selected for this by having its chip select lina asserted during Reset. This circult 
Is shown In the diagram In Figure F-7. 


Descriptor zero in the selacted MMU will have had its logical addrass mask and address 
space number cleared to $00, its address space mask set to $FF, and the enable bit set. 
Because of this, the logical address passes to the physical address bus (via descriptor 
zero) without alteration. The enable bits of descriptors 1-31 are cleared to zero to disable 
them and their contents remain uninitialized. If the MMU Is not chip selected during 
reset, the enable bits In all descriptors are cleared and no descriptor Is initialized. 


F.8.1.2 Idle States. The idle state is used to terminate bus accesses and prepare for new 
ones. The MMU Is “backed-off" the bus; I.e., the data transceivers are placed in the high- 
impedance state and the address latches are put into the transparent mode. The outputs 
are driven to the same levels as in reset except that HAD is rescinded one-half clock after 
MAS to provide addrass hold time. 


While in the Idie state, the MMU uses the function code inputs to Index into the address 
space table to provide the cycla address space number. If address strobe is asserted, a 
normal translation is performed. If address strobe Is negated and chip select, Interrupt 
acknowledge, interrupt request in, GO, and the data strobes indicate an access from the 
physical bus, an operation is performed. 


F.8.2 NORMAL ADDRESS TRANSLATION. At the start of a bus cycle, the processor 
presents the logical address, read/write signal, and the function code to tha memory 
management mechanism. The function code is used to Index into the address space 
table to select the cycle address space number. When address strobe is asserted, the 
normal translation phase begins by sending the cycle address space number, the logical 
address, and the read/write signal to each descriptor for matching. 


NOTE 


Tha functlon codes must be valid before address strobe Is asserted to aliow for 
the table lookup. Currant versions of the MC6&8000 provide this setup time; 
however, early mask set (R9M, T6E) do not. With these early mask sets, address 
strobe must be delayed to the MMU. 


F.8.2.1 Matching. Matches can occur in two areas: range and space. 


A range match occurs If, in each bit position in the logical address mask which is sat, the 
incoming logical address matches the logical base address. 


A space match occurs if, in each bit position in the address space mask which is set, the 
cycle address space number matches the address space number, 


F.8.2.2 Translation. An address match occurs If there is a range match and a space 
match, A write violation occurs if a write is attempted to a write-protected segment. If 
there is an address match in a descriptor and no write violation, the physical addrass Is 
formed trom the physical base address of that descriptor and the logical address. The 
logical address is passed through in those bit positions In the logical address mask 
which are clear (the “don’t cares’’). In the other bit positions, the physical base address is 
gated out to the physical address bus. 


The used and, if the cycle was a write, the modified bits In the segment status register 
are set. If the interrupt bit is set, then the interrupt pending bit is set. WIN Is asserted if 
the write protect bit is set and the cycle was a read or a read-modify-write. If the cycle 
was a write, MAS is not asserted to prevent the write from modifying data. 


After the physical address is stable, MAS Is asserted to indicate a valid address Is on the 
bus. HAD ts asserted to hold the address stable on the latches and the PADO-PAD 15 lines 
are then placed in the high-impedance state. If address strobe is then negated, the cycle 
has terminated and the MMU returns to the idle state. if addrass strobe is not negated, 
the cycle can continue in three ways: 


1. Chip select or interrupt acknowledge and Interrupt request in are asserted, the 
MMU will begin an operation as a master. 


2. If GOin ts detected by an MMU it will begin a slave operation. 


3. If a high-to-low transition is detected on the read/write line, indicating a write, ad- 
dress strobe remains asserted and the matched segment is write protected, a write 
violation occurs. This would be the result of a read/modify/write bus cycle on a pro- 
tected segment. 


F.8.2.2.1 WRITE VIOLATION, If an address match occurs but the bus cycle was a write to 
a write protected segment, a write violation occurs. In this case, the result descriptor 
pointer is loaded from the priority encoder, the fault bit Is set in the global status register, 
and the double fault bit is set if the fault bit was previously set. The state of the 
read/write line is latched into the read/write bit of the local status register and bits L4-L7 
are encoded to indicate write violation. The FAULTout signal is then asserted for five 
clock cycles or until address strobe is negated, whichever Is greater. 


The logical address Is latched Into ACO (MSB) and AC1 (LSB) of the accumulator. The cy- 
cle address space number is latched Into AC6. Thase registers ara marked as non-global 
with respect to the global accumutator for translate and global accumulator for load bits. 
If the FAULT pin has bean connected to the bus error pin on tha MC68000, address strobe 
wilt ba negated as the processor begins the bus error exception processing. When ad- 
dress strobe Is negated, the MMU will anter the idle state. 


WARRANTY 


Dual Systeme Corporation warrants the equipment covered 
hereby to be free from defects in material and workmanship 
for twelve (12) months from date of original shipment to 
purchaser. During this warranty period Dual Systems will 
repair or replace defective equipment FOB its place of busi-~ 
ness without charge to purchaser. 


This warranty applies to defects arising out of normal use 
and service of the equipment as specified by Dual Systems. 
This warranty does not cover abnormal operation of the 
equipment, accident, alteration, negligence, misuse and 
repairs or service performed by other than Dual Systems’ 
authorized representatives. Purchaser shall upon request by 
Dual Systems furnish reasonable evidence that the defect 
arose from causes placing a liability on Dual Systems. 


The obligation of Dual Systems under this warranty ia lim- 
ited to repair or replacement of the defective equipment and 
is the only warranty applicable to the equipment. Dual Sys- 
tema shall not be Liable for any injury, loss or damage, 
direct or consequential, arising out of the use or inability 
to use the product. No changes in the warranty shall be 
effective without the prior approval in writing of both par- 
ties. This warranty and obligations and liabilities 
thereunder shall replace all warranties or guarantees 
express or implied including the implied warranty of mer- 
chantability. 


Dual Systems Corporation 
2530 San Pablo Avenue 
Berkeley, California 94702 


(415) 549-3854 


